Skill Trust Decision

drive-analysis

Name: drive-analysis Trust Review Report
Item: drive-analysis
Rating: 75
Author: ClawSafe

安全驾驶分析技能，代码结构清晰，仅包含视频分析API调用和本地数据缓存，未发现恶意行为。主要发现为AgentSkill中未声明的subprocess调用，但属于框架基础设施代码，非面向用户功能。

Install decision first Source: ClawHub Scanned: Apr 30, 2026

Files 30

Artifacts 11

Violations 3

Findings 3

Why this conclusion was reached

2/4 dimensions flagged

Block

Declared vs actual capability

3 undeclared or violating capabilities were inferred.

Block

Hidden execution and egress

1 high-risk artifacts or egress signals were extracted.

Pass

Attack chain and severe findings

There is no explicit malicious chain in the report.

Review

Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

未声明的shell执行功能 +15

AgentSkill.ai_chat()通过subprocess执行openclaw agent，SKILL.md未声明此能力

硬编码占位符凭证 +5

face_analysis/README.md:11 包含API_KEY = "your-api-key-here"

依赖版本未锁定 +5

requirements.txt中pydash/yaml/SQLAlchemy使用精确版本，但smyx_common依赖文件使用通配符*

Most important evidence

Medium Doc Mismatch

未声明的shell执行能力

AgentSkill.ai_chat()方法通过subprocess执行openclaw agent命令，但SKILL.md声明的能力列表中未包含此功能，属于阴影功能。

skills/smyx_common/scripts/skill.py:52

如该功能为内部框架使用，建议在文档中声明；如不需要建议移除。

Low Credential Theft

硬编码占位符API密钥

face_analysis/README.md第11行包含占位符凭证字符串 'your-api-key-here'，虽为示例但可能造成混淆。

skills/face_analysis/README.md:11

移除或替换为更明确的占位符提示，如【请替换为您的API密钥】

Low Supply Chain

依赖版本未完全锁定

smyx_common/requirements.txt使用127个依赖，部分使用通配符版本，可能引入供应链风险。

skills/smyx_common/requirements.txt:1

建议将所有依赖版本锁定到具体版本号

Declared capability vs actual capability

Filesystem Pass

Declared READ

→

Inferred READ

skills/face_analysis/scripts/face_analysis.py:68 读取本地视频文件

Network Pass

Declared READ

→

Inferred READ

skills/smyx_common/scripts/util.py:145 发送HTTP请求到API服务器

Shell Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/skill.py:52 subprocess.run执行openclaw命令

Database Block

Declared NONE

→

Inferred WRITE

skills/smyx_common/scripts/dao.py:41 创建SQLite数据库存储用户凭证

Environment Block

Declared NONE

→

Inferred READ

skills/smyx_common/scripts/config.py:145 读取OPENCLAW_SENDER_OPEN_ID等环境变量

Suspicious artifacts and egress

High API Key

API_KEY = "your-api-key-here"

skills/face_analysis/README.md:11

Medium External URL

https://your-api-server.com/api/v1/face-analysis

skills/face_analysis/README.md:10

Medium External URL

http://192.168.1.234:9601/smyx-open-api

skills/smyx_common/scripts/config-dev.yaml:2

Medium External URL

http://192.168.1.234:4100

skills/smyx_common/scripts/config-dev.yaml:3

Medium External URL

http://192.168.1.234:7070/jeecg-boot-xzgz

skills/smyx_common/scripts/config-dev.yaml:4

Medium External URL

https://livemonitortest.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config-test.yaml:2

Medium External URL

http://livemonitortest.lifeemergence.com

skills/smyx_common/scripts/config-test.yaml:3

Medium External URL

https://healthtest.lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config-test.yaml:4

Medium External URL

https://open.lifeemergence.com/smyx-open-api

skills/smyx_common/scripts/config.yaml:7

Medium External URL

http://livemonitor.lifeemergence.com

skills/smyx_common/scripts/config.yaml:8

Medium External URL

https://lifeemergence.com/jeecg-boot-xzgz

skills/smyx_common/scripts/config.yaml:9

Dependencies and supply chain

Package	Version	Source	Known vuln	Notes
requests	`2.32.5`	pip	No	主依赖，用于API调用
pydash	`8.0.6`	pip	No	精确版本锁定
SQLAlchemy	`2.0.46`	pip	No	精确版本锁定
langchain	`1.0.3`	pip	No	未锁定次版本，可能有兼容性问题
openai	`2.16.0`	pip	No	未使用，依赖声明过度

File composition

30 files · 2690 lines

Python 19 files · 2147 linesMarkdown 4 files · 383 linesText 2 files · 130 linesYAML 5 files · 30 lines

Files of concern · 3

skills/face_analysis/README.md Markdown · 86 lines

硬编码占位符API密钥 · API_KEY = "your-api-key-here" · https://your-api-server.com/api/v1/face-analysis

skills/smyx_common/scripts/skill.py Python · 82 lines

未声明的shell执行能力

skills/smyx_common/requirements.txt Text · 127 lines

依赖版本未完全锁定

Other files · util.py · SKILL.md · skill.py · dao.py · config.py · drive_analysis.py +3

30 files · 93.8 KB · 2690 lines

Python 19f · 2147LMarkdown 4f · 383LText 2f · 130LYAML 5f · 30L

├─ ▾ 📁 references

│ └─ 📝 api_doc.md Markdown 21L · 664 B

├─ ▾ 📁 scripts

│ ├─ 🐍 __init__.py Python 1L · 39 B

│ ├─ 🐍 api_service.py Python 52L · 1.6 KB

│ ├─ 🐍 config.py Python 24L · 658 B

│ ├─ 🐍 drive_analysis.py Python 242L · 8.7 KB

│ └─ 🐍 skill.py Python 23L · 573 B

├─ ▾ 📁 skills

│ ├─ ▾ 📁 face_analysis

│ │ ├─ ▾ 📁 references

│ │ │ └─ 📝 api_doc.md Markdown 69L · 1.7 KB

│ │ ├─ ▾ 📁 scripts

│ │ │ ├─ 🐍 __init__.py Python 0 B

│ │ │ ├─ 🐍 api_service.py Python 52L · 1.8 KB

│ │ │ ├─ 🐍 config.py Python 40L · 1.2 KB

│ │ │ ├─ 📋 config.yaml YAML 1L · 3 B

│ │ │ ├─ 🐍 face_analysis.py Python 205L · 6.9 KB

│ │ │ └─ 🐍 skill.py Python 269L · 11.0 KB

│ │ ├─ 📝 README.md Markdown 86L · 2.4 KB

│ │ ├─ 🐍 __init__.py Python 0 B

│ │ └─ 📄 requirements.txt Text 3L · 45 B

│ └─ ▾ 📁 smyx_common

│ ├─ ▾ 📁 scripts

│ │ ├─ 🐍 __init__.py Python 8L · 143 B

│ │ ├─ 🐍 api_service.py Python 96L · 2.5 KB

│ │ ├─ 🐍 base.py Python 33L · 469 B

│ │ ├─ 📋 config-dev.yaml YAML 6L · 214 B

│ │ ├─ 📋 config-prod.yaml YAML 0 B

│ │ ├─ 📋 config-test.yaml YAML 6L · 256 B

│ │ ├─ 🐍 config.py Python 240L · 9.0 KB

│ │ ├─ 📋 config.yaml YAML 17L · 463 B

│ │ ├─ 🐍 dao.py Python 348L · 10.9 KB

│ │ ├─ 🐍 skill.py Python 82L · 2.4 KB

│ │ └─ 🐍 util.py Python 432L · 16.3 KB

│ ├─ 🐍 __init__.py Python 0 B

│ └─ 📄 requirements.txt Text 127L · 2.2 KB

└─ 📝 SKILL.md Markdown 207L · 11.7 KB

Security positives

代码结构清晰，模块化设计良好

未发现反向shell、base64混淆等恶意模式

未发现凭证收割循环或环境变量遍历

网络请求目标为正常业务API域名(lifeemergence.com)

本地数据库仅用于缓存用户会话，非敏感数据外泄

文件操作限定在技能目录内，无越权访问敏感路径

API密钥通过参数传入，非硬编码在执行代码中